General

  • Target

    ccf3af35adbe67a458d5de83c50aac89b24dabafdee39dc47fdb1a5a85995083

  • Size

    14KB

  • Sample

    240922-w3crrstaln

  • MD5

    4c0466a4add441228e21b76ec79d22d0

  • SHA1

    7cad44491e42676def31ae6a4f7b1940a0bdd09f

  • SHA256

    ccf3af35adbe67a458d5de83c50aac89b24dabafdee39dc47fdb1a5a85995083

  • SHA512

    720b8b528030ec3aff64469a669ce7d72805376128f17dea1c8e358e8b381b23defa73a8db4221bf5d3622117c74e92bde16733d3757d4f754c3db569bb970f2

  • SSDEEP

    192:K3mbPYCfMcrfOIuZmvKQxtzlSIVX6NONEkuVhGspejDMN1:hMCfrfQ6tBSIUkcQspeUN1

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.180.12:7810/BKje

Targets

    • Target

      ccf3af35adbe67a458d5de83c50aac89b24dabafdee39dc47fdb1a5a85995083

    • Size

      14KB

    • MD5

      4c0466a4add441228e21b76ec79d22d0

    • SHA1

      7cad44491e42676def31ae6a4f7b1940a0bdd09f

    • SHA256

      ccf3af35adbe67a458d5de83c50aac89b24dabafdee39dc47fdb1a5a85995083

    • SHA512

      720b8b528030ec3aff64469a669ce7d72805376128f17dea1c8e358e8b381b23defa73a8db4221bf5d3622117c74e92bde16733d3757d4f754c3db569bb970f2

    • SSDEEP

      192:K3mbPYCfMcrfOIuZmvKQxtzlSIVX6NONEkuVhGspejDMN1:hMCfrfQ6tBSIUkcQspeUN1

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks